[Unit]
Description=SSSD PAM Service responder
Documentation=man:sssd.conf(5)
After=sssd.service
BindsTo=sssd.service
RefuseManualStart=true

[Install]
Also=sssd-pam.socket sssd-pam-priv.socket

[Service]
ExecStartPre=-/bin/chown root:root /var/log/sssd/sssd_pam.log
ExecStart=/usr/lib/x86_64-linux-gnu/sssd/sssd_pam --debug-to-files --socket-activated
Restart=on-failure
User=root
Group=root
PermissionsStartOnly=true